[Trend]Demonstrating Command Injection and E-Stop Abuse Against Industrial Radio Remote Controllers

[igor51]

Demonstrating Command Injection and E-Stop Abuse Against Industrial Radio Remote Controllers

In our research, we found that it is possible to perform attacks within or out of RF range. For remote attackers out of the transmission range, there are two possibilities: be a truly remote attacker and do a computer-borne attack (that is, to take control of a computer used to software-program or -control the RF devices), or have temporary physical access to the facility to drop a battery-powered, pocket-sized embedded device for remote access. As a proof of concept (PoC), we developed such a device to show the feasibility.

The post Demonstrating Command Injection and E-Stop Abuse Against Industrial Radio Remote Controllers appeared first on .

Source: Demonstrating Command Injection and E-Stop Abuse Against Industrial Radio Remote Controllers